PRIVACY POLICY.

1. Introduction

1.1 This Privacy Policy outlines how we collect, use, and protect your personal data in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1.2 This policy applies where we are acting as a data controller – that is, where we determine the purposes and means of processing your personal data.
1.3 Our website provides privacy settings enabling you to manage your preferences regarding direct marketing and data sharing. You can access these controls at [Insert URL to Privacy Controls].
1.4 We use cookies on our website. Where cookies are not strictly necessary for site functionality, we will ask for your consent upon your first visit.
1.5 In this policy, “we”, “us”, and “our” refer to [Insert Company Name], a digital media company registered in the UK. For more details, see Section 13.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Contact Data: Name, email address, phone number, social media handles, postal address.

Account Data: Login credentials, preferences, business name (if applicable), and account activity.

Transaction Data: Payment details (handled via secure third parties), purchase history.

Communication Data: Messages sent via our contact forms, email, and other communications.

Usage Data: IP address, device type, browser type, visit duration, pages viewed, and user behaviour, collected through analytics.

Marketing Preferences: Your stated preferences for receiving communications.

3. Purpose and Legal Basis for Processing

We process your personal data under one or more of the following lawful bases:

Contractual necessity: To provide our services, process payments, and manage your account.

Legitimate interests: For website administration, communications, fraud prevention, and improving our services.

Consent: For sending you marketing emails or newsletters. You can withdraw consent at any time.

Legal obligations: To comply with UK law.

Vital interests: In emergencies to protect your or another person’s life.

4. Sharing Your Data

We may share your personal data with:

Professional advisers (e.g. legal and financial consultants)

Website hosting providers and analytics partners (e.g. Google Analytics)

Payment processors (e.g. Stripe or PayPal, as applicable)

Third-party service providers necessary to deliver our services
All third parties are contractually obligated to comply with UK data protection standards.

5. International Transfers

If your personal data is transferred outside the UK (e.g. to servers or service providers in the US), such transfers will be protected by appropriate safeguards, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).

6. Data Retention

We retain personal data only for as long as necessary:

Contact data: Up to 2 years after last contact

Account data: Up to 2 years after account closure

Transaction data: For 6 years (for tax and audit purposes)

Communication data: Up to 2 years

Usage data: Up to 1 year
Data may be retained longer where required by law or for the defence of legal claims.

7. Your Rights

You have the following rights under UK data protection law:

Right to access – obtain a copy of your data

Right to rectification – correct inaccurate data

Right to erasure – request deletion

Right to restrict processing – in limited circumstances

Right to object – to data processing or marketing

Right to data portability

Right to lodge a complaint – with the ICO (www.ico.org.uk)

Right to withdraw consent – at any time

To exercise your rights, contact us at [Insert contact email].

8. Cookies

We use cookies to:

Authenticate users

Personalise user experience

Monitor website performance

Conduct marketing analytics

Manage cookie consent

Please see our [Cookie Policy] for full details.

9. Managing Cookies

You can control cookies via your browser settings or the cookie banner on our site. Disabling cookies may impact your user experience.

10. Changes to This Policy

We may update this policy periodically. We recommend checking this page regularly. Major changes will be communicated via email or site notice.

11. Contact Us

For questions or concerns about this policy or your data, contact:
Orbyt Studio
167-169 GREAT PORTLAND STREET, LONDON, W1W 5PF
contact@orbytstudio.com
[ICO Registration Number]